SB2006030901 - Improper input validation in Linux kernel

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2006030901

SB2006030901 - Improper input validation in Linux kernel

Published: March 9, 2006

Security Bulletin ID SB2006030901
Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Local access
Highest impact Denial of service

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 security vulnerability.


1) Improper input validation (CVE-ID: CVE-2006-0742)

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The die_if_kernel function in arch/ia64/kernel/unaligned.c in Linux kernel 2.6.x before 2.6.15.6, possibly when compiled with certain versions of gcc, has the 'noreturn' attribute set, which allows local users to cause a denial of service by causing user faults on Itanium systems. This vulnerability affects all verison of Linux kernel 2.6.x before 2.6.15.6, and may be exclusive to Itanium systems.


Remediation

Install update from vendor's website.

References